BDU%3A2022-00128 — Vulnetix

BDU%3A2022-00128 PUBLISHED CVSS 9 CRITICAL

Уязвимость реализации класса Microsoft.SharePoint.WorkflowActions.SetVariableActivity пакетов программ Microsoft SharePoint Foundation, SharePoint Server и SharePoint Enterprise Server, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0

Affected Products

Vendor	Product	Versions
Microsoft Corp	Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019

Timeline

Jan 12, 2022 CVE Published
Mar 19, 2026 Security Advisory

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34520 url
https://www.zerodayinitiative.com/advisories/ZDI-21-828/ url
https://nvd.nist.gov/vuln/detail/CVE-2021-34520 url

Open in Interactive Console →